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ABSTRACT 


Work  in  progress  on  an  expert  system  used 
to  reconfigure  and  tune  airframe/engine 
control  systems  on-line  in  real  time  in 
response  to  battle  damage  or  structural 
failures  is  presented.  The  closed  loop 
system  is  monitored  constantly  for  changes 
in  structure  and  perfonnance,  the  detection 
of  which  prompts  the  expert  system  to 
choose  tmd  apply  a  particular  control 
restructuring  algorithm  based  on  the  type 
and  severity  of  the  damage.  Each  algorithm 
is  designed  to  handle  specific  types  of 
failures  and  each  is  applicable  only  in 
certain  situations.  The  expert  system  uses 
information  about  the  system  model  to 
identify  the  failure  and  to  select  the 
technique  best  suited  to  compensate  for  it. 
A  depth-first  search  is  used  to  find  a 
solution.  Once  the  new  controller  is 
designed  and  implemented  it  must  be  tuned 
to  recover  the  original  closed-loop  handling 
qualities  and  responsiveness  from  the 
degraded  system.  Ideally,  the  pilot  should 
not  be  able  to  tell  the  difference  between  the 
original  and  redesigned  systems.  The  key  is 
that  the  system  must  have  inherent 


redundancy  so  that  degraded  or  missing 
capabilities  ctui  be  restored  by  creative  use 
of  tiltemate  functiontilities.  With  enough 
redundancy  in  the  control  system,  minor 
battle  damage  affecting  individual  control 
surfaces  or  actuators,  compressor  efficiency, 
etc.  can  be  compensated  for  such  that  the 
closed-loop  perfonnance  is  not  noticeably 
altered.  The  work  is  applied  to  a  Black 
Hawk/T700  system. 

INTRODUCTION 

A  restructurable  control  system  has  the 
ability  to  redesign  itself  on-line  in  real  time 
to  compensate  for  a  detectable  change  in  the 
system.  Here  the  closed-loop  system 
consists  of  a  controller  and  the  dynamical 
system  being  controlled,  henceforth  known 
as  the  plant  (figure  1 ).  A  detectable  change 
is  defined  as  an  excursion  of  the  identified 
system  model  from  the  range  which  is 
considered  nonnal,  indicating  possible 
damage  to  the  closed-loop  system.  The 
ability  to  restructure  is  important  to  mission 
effectiveness  because  it  allows  a  closed-loop 
system  to  continue  operating  in  an 
acceptable  manner  even  after  changes  to  the 
system.  Examples  of  systems  which 
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undergo  sudden  ch;inges  are  aircraft  with 
battle  damage  or  engines  with  foreign  object 
damage.  With  an  invariant  control  system 
designed  for  the  nominal  plant,  an  aircraft 
which  has  experienced  battle  damage  may  be 
just  binely  operable.  In  the  worst  case  it 
would  be  unstable.  With  a  redesigned 
control  system  for  the  new,  altered  plant,  the 
aircraft  is  more  likely  to  return  safely  and  it 
may  be  able  to  ciu-ry  out  all  or  part  of  its 
mission  with  only  slightly  reduced 
capabilities. 

Restructurable  control  is  applicable  to 
systems  which  experience  mechanical 
problems  such  as  actuator  or  control  surface 
failures  and  where  the  capability  lost  due  to 
failure  is  at  least  partiiilly  available  in  .some 
other  component  or  components.  For 
example,  compressor  degradation  caused  by 
foreign  object  damage  results  in  the  need  to 
run  a^  a  higher  temperature  to  obtain  a 
desired  thrust.  Tliis  might  be  achieved  by 
adjusting  the  fuel  valve,  jui  engine  actuator, 
to  increa.se  the  fuel/air  ratio.  Most  of  the 
redesign  strategies  in  the  literature  attempt  to 
redistribute  the  forces  and  moments  of  the 
failed  actuators  or  missing  surfaces  over  the 
remaining  redundant  components  to 
cotnpensate  for  the  lost  capabilities.  The 
methods  differ  in  the  redesign  approach  they 
employ.  The  research  by  Looze,  et  al  has 
concentrated  on  a  linear  quadratic  approach 
to  the  redesign  procedure  [I].  Horowitz  has 
applied  quantitative  feedback  theory  to  the 
initial  design  of  a  fixed  compensator  capable 
of  h;uidling  failures  luid  thus  avoids  the 
control  system  reconfiguration  problem 
totally  (2|.  Ostroff  iuid  Hueschen  have  u.sed 
the  Proportional-Integral-Filter  with 
Command  Generator  Tracking,  a  direct 
digital  integrated  formulation  [3].  Raza  and 
Silverthom  have  used  the  pseudoinverse  of 
the  control  matrix  and  generalized  input 


vectors  to  achieve  the  desired  respon.ses 
along  orthogonal  (longitudinal,  latitudinal, 
and  directional)  axes  [4].  This  last  technique 
is  similar  to  the  control  mixer  concept  for 
reconfiguration  described  by  Rattan  [5]. 

The  goal  of  this  paper  is  to  describe  a  way 
to  tie  together  some  of  the  previous  work  in 
the  field  so  as  to  achieve  a  highly  survivable 
control  system.  A  highly  survivable  system 
can  successfully  restructure  in  response  to  a 
multiiude  of  different  failures.  In  general, 
previous  restructurable  controllers  have  been 
specifically  designed  for  a  single  failure 
type.  Each  design  method  used  is  valid  for 
its  specific  application.  However,  none  is 
"optimal"  nor  even  applicable  in  all 
situations.  Thus,  to  achieve  a  highly 
survivable  sy.stem,  it  is  necessary  to  identify 
the  current  dynamic  characteristics  of  the 
system  and  to  detemiine  which  of  the 
possible  solutions  is  the  best  in  some  sense 
under  the  given  circumstances.  To 
accomplish  this  decision  making  in  an 
uncertain  environment  with  potentially 
conflicting  mission  objectives,  some  type  of 
intelligence  will  be  required.  Hence  the 
concept  of  an  expert  system  to  coordinate 
the  different  redesign  strategies  is  proposed. 

BACKGROUND 

The  idea  of  restructurable  control  has 
appeared  recently,  mainly  with  respect  to 
aircraft.  Battle  damage  has  been  considered 
an  ideal  application  for  the  research.  Several 
accidents  and  near  accidents  involving 
airliners  where  the  pilot  was  able  to  recover 
and  land  the  aircraft  after  analyzing  the 
problem  have  been  used  as  justification  for 
introducing  restructurable  control  to  the 
commercial  sector  as  well  [6].  A  good 
example  of  a  pilot  manually  integrating  an 
engine  and  airframe  control  to  reconfigure 
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the  system  appears  in  [7]  where  power  was 
used  to  achieve  both  pitch  and  directional 
authority  after  complete  hydraulic  failure.  If 
the  expert  system  could  augment  the  pilot’s 
ability  by  adapting  the  control  system  to 
compensate  for  the  damage,  the  pilot’s 
burden  would  be  lessened  and  he  would  be 
free  to  carry  out  the  mission  objectives. 

Creating  the  ability  for  an  aircraft  to 
restructure  its  control  system  after  damage  to 
continue  at  a  level  of  perfomiance  sunilar  to 
its  original  design  specifications  is  higlily 
desirable.  Thus  this  strategy  is  very 
attractive  for  both  civiliait  and  military 
aeronautics  luid  propulsion  applications.  In 
addition,  the  main  ideas  presented  here  are 
not  limited  to  aircraft — they  can  be  applied 
to  a  wide  variety  of  systems  with  inherent 
redundtuicy. 

EXPERT  SYSTEM  COMPONENTS 

Generally.  expert  system  consists  of  three 
independent  parts:  a  mle  base,  a  knowledge 
base,  and  an  inference  engine — a  mechanism 
for  deducing  new  information.  The  rule 
base  is  usutilly  a  set  of  heuristics  or  rules-of- 
thumb  which  apply  to  the  generiil  type  of 
problem  at  hand,  for  example  control  system 
design.  The  knowledge  base  is  a  collection 
of  data  specific  to  the  current  situation  such 
as  the  particular  plant  under  control.  The 
i.  '’erence  engine  is  an  algorithm  which 
applies  the  niles  to  the  knowledge  base  in 
order  to  gleiui  new  infonnation  or  to 
detemrine  if  an  assumption  is  justified. 
When  new  infonnation  is  inferred  or 
otherwise  obtained,  it  is  .stored  in  the 
knowledge  base. 

The  basic  model  for  the  inference  engine 
used  in  this  work  comes  from  [81  but  many 
features  have  been  added  to  make  it  more 


powerful.  Some  of  these  include:  the  ability 
to  perform  numerical  calculations  required  to 
evaluate  certain  rules;  the  ability  to  remove 
or  replace  assertions  in  the  knowledge  base; 
the  ability  to  parse  certain  English-like 
phrases  during  the  evaluation  of  rules;  the 
ability  to  perfonn  "what-if  type  reasoning 
by  trying  different  scenarios  if  more  than 
one  is  appropriate.  The  original  inference 
engine  in  [8]  is  capable  of  perfonning 
symbolic  pattern  matching  with  wildcards  to 
evaluate  rules.  Using  previously  established 
assertions  from  the  knowledge  base  it  is  able 
to  infer  new  infonnation.  All  of  the 
functionality  of  the  original  inference  engine 
is  retained. 

An  inference  engine  can  work  with  any 
appropriately  structured  knowledge  base  and 
rule  base.  This  three  pan  structure  allows 
the  inference  engine  to  be  application- 
independent  while  the  application-dependent 
information  resides  in  the  rule  base  and  the 
facts  about  the  specific  instance  are  stored  in 
the  knowledge  base.  In  other  words,  the  rule 
base  might  apply  to  control  system  design 
for  rotary  wing  aircraft/engine  systems  in 
general  while  the  knowledge  base  might 
contain  only  information  specific  to  a 
particular  UH60A  Black  Hawk  helicopter 
with  a  unique  T700-GE-700  turboshaft 
engine. 

The  proposed  overall  structure  of  the 
reconfiguration  expert  system  is  shown  in 
figure  2.  It  consists  of  ( 1 )  an  inference 
engine,  (2)  a  control  system  restructuring 
knowledge  base  and  rule  ba.se,  and  (3)  a 
controller  tuning  knowledge  base  and  rule 
base.  The  control  system  restructurer  is 
already  partially  implemented.  An  on-line 
controller-tuning  expert  system  for  a  certain 
class  of  single-input  single-ouqnit  .systems 
has  been  developed  [9].  It  uses  the  same 
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inference  engine  as  the  reconfiguration 
expert  system.  Work  is  in  progress  to 
extend  the  tuning  expert  system  to  multi¬ 
input  multi-output  pUuits  with  various 
control  strategies. 

The  knowledge  base  of  the  restructurable 
control  system  consists  of  information  about 
the  plant  luid  its  controller.  For  a  linear 
system  such  parameters  as  the  system 
matrices  and  the  original  controller  gains  are 
stored.  There  iue  also  specifications  on  the 
actuators  such  as  linear  ranges  and  nonlinear 
characteristics.  Infonnation  stored  here  can 
be  updated  in  response  to  plant  changes  as 
new  data  about  the  system  become  available. 

The  rule  base  of  the  control  system 
restnicturer  contains  rules  about  control 

system  design.  These  range  from  top-level 

control  design  methods  to  low-level  details 
such  as  definitions  of  controllability  and 
observability.  The  rules  may  contain 

numeric.'il  expressions  to  be  evaluated  (such 
as  whether  a  realization  is  minimal)  and 
vtu'iables  to  be  given  values  by  the  inference 
engine  during  the  discovery  of  new 

relationships. 

A  separate  knowledge  base  exists  for  the 
tuning  system.  Following  the  approach  of 
[91.  it  contains  respon.se  characteristics 
associated  with  well-tunetl  loops  of  the  type 
in  question.  It  also  has  data  on  any  previous 
responses  obtainetl  in  the  tuning  process. 

A  rule  base  for  a  single-input-single-output 
controller  tuning  expert  system  has  been 
created  |91  luid  is  in  the  process  of  being 
extended  for  multivariable  controller  tuning. 
The  heuristics  use  the  results  from  previous 
tuning  efforts  and  other  pliuit  infonnation  for 
the  next  tuning  attempt. 


Figure  3  shows  the  interaction  of  the  expert 
system  with  the  overall  system.  A 
detectable  change  in  the  identified  model  of 
the  plant  will  cause  the  expert  system  to 
restructure  the  controller  to  compensate  for 
the  alteration.  After  the  new  controller  is 
implemented,  the  expert  system  will  adjust 
the  controller  parameters  to  optimize  the 
performance  of  the  closed  loop  system. 

SYSTEM  CAPABILITIES 

Figure  4  shows  the  anticipated  setup  of  the 
overall  system.  It  depicts  a  hierarchy  with 
an  expert  system  receiving  information  from 
a  system  identifier  and  a  pattern  extractor. 
This  information  is  used  in  the  restructuring 
and  tuning  of  the  controller  for  the  altered 
plant.  In  the  current  setup,  the  plant 
simulation,  the  controller,  and  the  expert 
system  are  all  written  in  compiled  LISP 
running  on  a  Texas  Instruments  Explorer  n+ 
LX.  The  system  identifier  is  not  yet 
implemented  and  the  pattern  extractor  is  net 
yet  incorporated  though  it  exists  [9]. 

The  objective  of  the  system  identifier  is  to 
provide  an  estimate  of  the  system  parameters 
on-line  in  real  time.  The  plant,  linearized 
about  an  operating  point,  can  be  modeled  as 

X  -  Ax  4  Bu 

y  -  CxfDu 

where  x  is  the  per'urbation  vector  of  state 
viu'iables,  u  is  the  vector  of  control  inputs, 
;md  y  is  the  vector  of  system  outputs.  The 
matrices  A,  B,  C,  and  D  are  the  parameters 
returned  by  the  identification  routine.  A 
detectable  change  in  any  of  these  causes  the 
expert  system  to  begin  the  redesign  process. 

The  pattern  extractor  observes  the  transients 
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as  they  occur  and  detennines  values  for  a  set 
of  features  which  fully  describes  the 
response.  This  set  includes  such  attributes 
as  percent  overshoot,  damping,  and  rise  time. 
Each  attribute  is  given  a  numerical  value 
which  is  passed  to  the  controller  tuning 
expert  system’s  knowledge  base.  If  the 
values  are  too  far  from  the  desired,  the 
tuning  expert  system  is  activated.  Figure  5 
contains  a  block  diagram  of  this  process. 

Since  an  identification  scheme  is  not 
currently  implemented,  the  reconfiguration 
expert  system  u.ses  a  model  of  the  plant 
directly  from  the  simulation,  i.e.  there  is 
perfect  and  immediate  identification.  A 
change  in  the  model  prompts  the  expert 
system  to  analyze  and  redesign  the  control. 
The  new  controller  replaces  the  old  one  in 
the  simulation  and  the  state  continues  to 
evolve. 

The  restructuring  strategies  that  the  expert 
system  ciui  currently  use  involve  the 
pseudoinverse  of  B  [4,5].  There  are  several 
limitations  on  the  control  mixer  algorithm 
such  as;  it  is  applicable  in  cases  where  there 
is  only  actuator  damage,  it  generally  does 
not  work  well  when  changes  in  the  system 
dynamics  occur  idthough  an  implemented 
modification  to  account  for  changes  in  the  A 
matrix  improves  the  results  significantly  in 
many  cases;  it  cannot  account  for  system 
nonlinearities;  and  it  may  produce  excessive 
control  commands  [10], 

For  instance,  consider  an  aircraft  using  state 
feedback  as  the  control  scheme.  If  an 
actuator  sticks  (which  is  equivalent  to 
zeroing  out  a  column  of  the  B  matrix),  the 
expert  system  might  take  the  realization 
(A,B,C)  and  manipulate  it,  using  the  Kalman 
Structure  Theorem  for  instance,  until  it  is 
minimal  and  B^B  has  full  rank.  When  the 


expert  system  achieves  this  goal,  the 
pseudoinverse  equation 

K  -  (B^B)  'BTB„K„ 

is  used  to  determine  the  new  controller 
matrix.  Here  B  is  the  altered  control  matrix 
and  B^Kfl  is  the  reduced  order  version  of  the 
state  feedback  matrix  of  the  unimpaired  full 
order  model. 

Examples  of  the  heuristics  used  in  the  above 
example  are: 

1.  if  (A,B,C)  is  controllable  and 

observable 

then  realization  is  minimal 

2.  if  B^B  is  full  rank 

then  pseudoinverse  of  B  exists 

3.  if  (A,B,C)  is  not  minimal  and 

(A,B,C!'  is  minimum  phase 
then  find  a  minimal  realization 

4.  if  A=A^,  and 

B^tBo  and 
C=Q, 

then  control  mixer  scheme  can 
be  used 

5.  if  pseudoinverse  of  B  exists  and 

realization  is  minima!  and 
control  mixer  scheme  can  be 
used 
then 

K  =  (B^B)  'B^B„Ko 

where  the  italicized  phrases  represent 
assertions  in  the  knowledge  base  and 
nonitalicized  phrases  indicate  numerical  tests 
or  computations.  These  rules  are  typical  of 
the  heuristics  contained  in  the  rule  base. 

The  control  reconfiguration  expert  system 
employs  a  depth  first  search  strategy.  In  this 
scheme,  each  appropriate  redesign  method  is 
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tried  in  turn  until  one  produces  a  valid 
solution.  The  steps  of  the  controller  design 
algorithm  are  performed  as  long  as  the 
conditions  for  the  methodology  hold.  If  a 
step  is  infeasible,  the  algorithm  is  rejected 
and  the  next  one  is  tried.  If  the  rules 
differentiate  sufficiently  between  the 
applicability  of  the  redesign  algorithms,  the 
impractical  ones  should  be  eliminated  early 
on  in  their  execution  so  that  the  first  method 
to  be  evaluated  to  any  significant  depth 
should  produce  a  viable  result. 

The  expert  system  executes  only  when 
invoked,  for  example  when  the  control 
system  needs  to  be  redesigned.  Once  the 
system  identification  scheme  is  implemented, 
it  will  communicate  with  the  expert  system 
and  cause  it  to  .start  redesigning  when  a 
detectable  change  in  the  system  matrices 
occurs. 

CONCLUDING  REMARKS 

The  expert  system  is  able  to  handle  a  variety 
of  reconfiguration  situations.  For  the 
algorithms  implemented  thus  far,  the  time  it 
takes  for  the  new  controller  to  be  designed 
and  implemented  depends  upon  the  order  of 
the  system  since  matrix  manipulations  are 
involved  almost  exclusively. 

The  control  restructuring  algorithms  which 
have  been  implemented  so  far  handle  most 
failure  cases  involving  actuator  damage 
(control  mixer)  and  many  situations  where 
the  system  dynamics  are  altered  as  well 
(modified  control  mixer).  Additional 
algorithms  will  be  included  to  achieve  a 
highly  survivable  system.  The  algorithms 
yet  to  be  implemented  are,  in  general,  more 
complicated  than  the  pseudoinverse -type  and 
require  more  analysis  during  the  control 
redesign.  Therefore,  their  on-line 


implementation  time  is  longer. 

Some  work  has  been  done  in  the  area  of 
controller  tuning  by  pattern  recognition 
tecliniques  for  single-input  single-output 
systems  [9,11,12].  The  methodology  must 
be  extended  to  multiple-input-multiple-output 
systems. 

Currently  the  numerical  calculations  are 
performed  in  LISP.  The  mechanism  is  in 
place,  however,  to  transfer  these  routines  to 
the  Explorer’s  LX  processor  (MC68020)  in 
a  language  more  suitable  for  number 
crunching  [13].  This  improvement  will  take 
the  system  a  step  closer  to  the  goal  of  real¬ 
time  operation. 

Work  is  continuing  on  an  on-line  multiple- 
input-multiple-output  system  identifier  [14]. 
Eventually  it  might  be  implemented  on  the 
LX  processor  or  as  a  separate 
microprocessor-based  system  to  signal  the 
expert  system  if  a  detectable  change  occurs 
in  the  model. 

An  on-line  pattern  extractor  which 
determines  transient  response  features  was 
developed  in  LISP  and  will  have  m  be 
transferred  to  the  LX  or  a  separate 
microprocessor.  It  will  pass  the  feature 
values  to  the  knowledge  base  of  the  tuning 
expert  system. 

The  simulation  of  a  linearized  T700  engine 
currently  resides  within  the  Explorer  but  a 
nonlinear,  real-time  model  will  eventually  be 
implemented  on  an  Applied  Dynamics 
AD  100  computer.  A  Black  Hawk  airframe 
simulation  may  be  incorporated,  too.  At  that 
point  the  interface  between  the  two 
•computers  will  allow  for  the  full  testing  of 
the  expert  system  in  a  more  realistic 
situation. 


19-6 


This  in-house  effort  is  expected  to  illustrate 
the  feasibility  of  using  expert  system 
technology  for  restructurable  control  and  to 
demonstrate  the  benefit  of  possibly 
incorporating  such  a  feature  into  the  Amty’s 
helicopter  fleet. 
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